Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
File:                     B0F9178297B811ECA8AA4230C4F9AE02.roa (raw, json)
Hash identifier:          FoCE53zxIc9RGDT20cSl66HA963RFqLllbD6isI2Eks=
Subject key identifier:   19:65:52:FB:A0:13:35:DD:49:70:3D:B1:FB:4E:30:D3:71:0C:E6:18
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       0401
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
Signing time:             Wed 15 Oct 2025 02:56:14 +0000
ROA not before:           Wed 15 Oct 2025 02:56:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139659
IP address blocks:        103.74.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Oct 15 02:56:14 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68ef0d4e-927e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:95:d3:eb:bc:da:42:66:03:9f:a3:b2:3b:
                    4f:88:3f:a8:2f:bb:e2:bc:b3:90:67:af:79:71:24:
                    f0:bb:31:7a:6e:bc:14:dc:cb:e8:b0:35:35:fa:6e:
                    f7:51:79:d5:b4:da:1e:a2:d5:4b:2c:cc:ed:a3:5b:
                    9b:f5:1e:a2:b5:3d:78:d6:f2:17:75:dd:4e:fc:b8:
                    9d:bf:de:eb:5d:a6:62:06:47:6a:a1:5a:18:b2:8a:
                    28:20:32:9c:7c:26:8c:eb:35:20:4d:54:70:8b:55:
                    38:5f:01:df:34:8f:0e:87:a5:89:d4:50:76:e7:70:
                    c4:20:ca:80:35:43:76:39:a1:3d:c7:d4:7f:85:34:
                    f8:02:bf:66:1a:f9:c4:b1:a5:0f:a9:77:7f:11:cd:
                    e2:5e:80:47:04:48:35:e6:2f:9d:47:59:9a:53:0e:
                    70:54:c6:2c:f7:a7:db:5d:33:6c:a7:69:8a:5f:e5:
                    d8:33:3a:b0:03:b8:f0:88:17:1d:35:f2:06:72:ef:
                    ef:a1:cf:c8:04:15:6c:a7:f2:a2:90:78:64:84:b8:
                    72:5d:b9:dc:cf:fd:41:2a:06:51:b1:8b:6c:68:5c:
                    07:a0:f3:d1:69:8a:81:dc:c1:f0:9c:09:4f:45:4b:
                    3d:3a:2c:98:80:89:ff:bd:9d:95:4b:54:48:5b:64:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:52:FB:A0:13:35:DD:49:70:3D:B1:FB:4E:30:D3:71:0C:E6:18
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/B0F9178297B811ECA8AA4230C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:30:e8:36:2c:8e:62:71:df:ed:d1:bf:50:3c:e3:a9:15:
         5f:06:cc:c6:a2:0b:d0:f3:b4:93:90:80:32:0b:e2:c4:83:4d:
         d4:d0:67:28:f2:8b:f7:22:17:71:66:84:7a:5b:be:8a:7c:3c:
         a9:b7:f8:77:dc:ca:d4:a0:cd:0b:2d:eb:85:ed:fd:4a:78:82:
         32:f2:f4:dd:f9:26:cc:33:a7:ce:cd:28:49:b2:35:6e:5b:4b:
         04:9a:9a:02:6b:7e:51:80:84:8d:c4:2e:d2:b9:de:93:25:2f:
         82:e4:b4:b0:f7:ec:b2:0e:24:2c:ea:34:d4:c2:33:79:93:e3:
         da:5d:b3:a8:cd:d3:19:e1:89:6f:19:4a:25:7c:b2:d7:b5:c1:
         48:46:e4:27:f4:23:ac:3f:8b:e1:d1:26:a6:10:7c:64:ca:25:
         ad:27:39:5c:bd:a2:34:5b:e4:22:6c:2b:40:eb:f7:e9:9c:ca:
         2e:72:54:89:37:f7:12:e5:b9:c0:a7:e1:f5:c1:de:f7:7e:34:
         61:03:2d:52:fb:62:cd:10:9b:45:1d:c8:fe:81:d4:d5:70:a0:
         6c:31:45:1e:a2:33:79:e6:7d:7d:b2:db:c5:1a:cd:7b:26:20:
         5e:1f:90:ab:1a:c5:f4:b5:a2:f6:c2:2e:fc:37:76:af:c4:33:
         9f:b0:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:25 2025 by rpki-client